Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          O4EBbz2hMxTXZoOVOLLR2V7fyeX37qEtj4eUHvGYq4M=
Subject key identifier:   7D:63:22:B1:63:80:4E:38:A7:45:FB:4D:47:5E:F7:C6:83:59:B0:EC
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       6225180753C0247E216AF34E40C647A44CF6F4E5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          99
Signing time:             Wed 13 May 2026 13:21:05 +0000
Manifest this update:     Wed 13 May 2026 13:16:05 +0000
Manifest next update:     Thu 14 May 2026 15:27:05 +0000
Files and hashes:         1: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: W++RgCTvzE7RJR+1SMOyodKBS0yo1anNzI1fQNZFscA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:25:18:07:53:c0:24:7e:21:6a:f3:4e:40:c6:47:a4:4c:f6:f4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: May 13 13:16:05 2026 GMT
            Not After : May 14 15:27:05 2026 GMT
        Subject: CN=7D6322B163804E38A745FB4D475EF7C68359B0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:f1:8d:5a:e3:63:d5:a1:74:7f:0e:42:8d:
                    f1:de:ba:9a:cd:e8:da:b9:ee:6c:ac:67:2b:74:16:
                    93:86:c3:bb:0c:f4:a9:19:e1:cc:de:1f:05:c6:83:
                    c6:b2:5b:0b:99:3b:5f:90:51:31:ab:ed:ef:8b:0f:
                    a2:6e:9c:4a:58:d8:31:d9:93:b0:9d:ac:66:48:78:
                    2b:26:7c:79:3b:ec:01:06:7e:16:24:96:11:81:c4:
                    20:13:31:f1:f5:b2:5b:54:74:88:2e:d7:05:68:da:
                    cc:76:64:60:85:92:1d:e5:54:7c:c4:76:d1:8d:db:
                    18:12:cf:ce:e9:90:bd:e9:6c:9f:ea:03:a9:25:c3:
                    00:94:a2:e9:8b:bf:19:9b:21:c4:b3:86:c4:23:23:
                    93:96:99:81:79:8c:aa:38:63:a6:97:e0:92:36:27:
                    61:96:aa:45:35:fa:73:c6:9b:5a:97:ae:ec:ef:e3:
                    1c:a0:29:d7:17:f2:a5:b5:88:8d:c0:a7:5a:3b:96:
                    2d:98:c6:6f:7f:7e:7b:1c:7e:94:6e:b5:40:84:d8:
                    44:a5:fb:8a:aa:ba:29:1b:4f:03:fa:26:47:93:c6:
                    27:41:0f:b5:e2:2f:16:72:ad:a5:89:f6:6a:a3:19:
                    52:2b:87:02:79:a6:35:72:60:29:77:92:f8:08:f8:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:22:B1:63:80:4E:38:A7:45:FB:4D:47:5E:F7:C6:83:59:B0:EC
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:2c:a8:3e:3b:23:06:fe:48:6c:df:d8:a1:c2:1a:57:6e:64:
         8a:6c:b2:a3:fb:e0:d9:85:d0:8a:a5:1a:0b:1d:5a:c8:90:62:
         92:8c:59:b7:de:28:46:af:d3:5e:c0:61:32:0f:1b:90:cc:76:
         d6:5c:58:85:17:84:0e:13:66:8d:1f:b3:c8:53:24:12:89:98:
         85:5e:8b:30:f7:1e:96:c1:0d:a1:be:7b:6a:97:3f:14:dc:6a:
         79:7c:9a:73:c9:7a:a6:c7:01:f0:d7:27:91:63:95:c1:ba:cd:
         62:e7:d3:97:0e:6f:55:f8:14:e9:66:09:71:b1:2a:94:79:40:
         2a:f9:5a:53:f2:b3:43:f3:01:5c:9d:f3:a5:02:52:8d:56:eb:
         9b:b8:47:2d:b1:a5:57:f1:d2:32:50:ab:81:f3:6d:0a:a3:82:
         3e:75:96:74:15:12:2e:33:e1:02:dc:f5:ac:cc:16:33:77:76:
         cb:d4:6e:f4:84:83:69:fb:28:40:23:99:cb:dc:f0:ef:6a:2a:
         57:7b:ff:1b:45:af:6c:c6:0f:4e:27:6f:69:ac:38:74:97:68:
         db:63:1e:cd:2e:22:93:76:21:4d:83:5c:32:52:1f:86:f2:4d:
         ec:9e:b4:e3:f2:e1:3a:9e:df:c1:e3:46:de:61:d7:e3:0c:53:
         fb:9f:39:70
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYiUYB1PAJH4havNOQMZHpEz29OUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4
RDM3QzUxRTAeFw0yNjA1MTMxMzE2MDVaFw0yNjA1MTQxNTI3MDVaMDMxMTAvBgNV
BAMTKDdENjMyMkIxNjM4MDRFMzhBNzQ1RkI0RDQ3NUVGN0M2ODM1OUIwRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBvGNWuNj1aF0fw5CjfHeuprN
6Nq57mysZyt0FpOGw7sM9KkZ4czeHwXGg8ayWwuZO1+QUTGr7e+LD6JunEpY2DHZ
k7CdrGZIeCsmfHk77AEGfhYklhGBxCATMfH1sltUdIgu1wVo2sx2ZGCFkh3lVHzE
dtGN2xgSz87pkL3pbJ/qA6klwwCUoumLvxmbIcSzhsQjI5OWmYF5jKo4Y6aX4JI2
J2GWqkU1+nPGm1qXruzv4xygKdcX8qW1iI3Ap1o7li2Yxm9/fnscfpRutUCE2ESl
+4qquikbTwP6JkeTxidBD7XiLxZyraWJ9mqjGVIrhwJ5pjVyYCl3kvgI+ImjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUfWMisWOATjinRftNR173xoNZsOwwHwYDVR0j
BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5
M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8xMzRBQzM2NzREMDVD
NERERUIzRkJFRTVFOTZCOTNFQThEMzdDNTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCyoPjsjBv5I
bN/YocIaV25kimyyo/vg2YXQiqUaCx1ayJBikoxZt94oRq/TXsBhMg8bkMx21lxY
hReEDhNmjR+zyFMkEomYhV6LMPcelsENob57apc/FNxqeXyac8l6pscB8NcnkWOV
wbrNYufTlw5vVfgU6WYJcbEqlHlAKvlaU/KzQ/MBXJ3zpQJSjVbrm7hHLbGlV/HS
MlCrgfNtCqOCPnWWdBUSLjPhAtz1rMwWM3d2y9Ru9ISDafsoQCOZy9zw72oqV3v/
G0WvbMYPTidvaaw4dJdo22MezS4ik3YhTYNcMlIfhvJN7J604/LhOp7fweNG3mHX
4wxT+585cA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:58:09 2026 by rpki-client